{"schema_version":1,"title":"Apple watchOS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 288 vulnerabilities in Apple watchOS: 0 in the last 7 days and 158 in the last 90 days, 68 of them critical and 62 exploited in the wild. The most recent, CVE-2026-86904, was published on 14 September 2026.","url":"https://junglewise.ai/threats/technologies/watchos","json_url":"https://junglewise.ai/threats/technologies/watchos.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/watchos","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":50,"all_time":288,"critical":68,"exploited":62,"last_7_days":0,"last_30_days":82,"last_90_days":158,"last_365_days":229},"latest":[{"cve":"CVE-2026-86904","cvss":7.5,"epss":0.0043,"slug":"cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue","title":"Apple iOS iPadOS watchOS cross-app tracking privacy issue","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:41.247+00:00","url":"https://junglewise.ai/threats/cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue"},{"cve":"CVE-2026-86903","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory","title":"Apple iOS out-of-bounds read in kernel memory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.14+00:00","url":"https://junglewise.ai/threats/cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory"},{"cve":"CVE-2026-86895","cvss":7.5,"epss":0.0047,"slug":"cve-2026-86895-apple-cloudkit-information-disclosure-in-persistent-account","title":"Apple CloudKit information disclosure in persistent account identifiers","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:40.473+00:00","url":"https://junglewise.ai/threats/cve-2026-86895-apple-cloudkit-information-disclosure-in-persistent-account"},{"cve":"CVE-2026-86893","cvss":3.3,"epss":0.0014,"slug":"cve-2026-86893-apple-ios-ipados-tvos-visionos-watchos-permissions-issue-in","title":"Apple iOS/iPadOS/tvOS/visionOS/watchOS permissions issue in CloudKit","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:40.263+00:00","url":"https://junglewise.ai/threats/cve-2026-86893-apple-ios-ipados-tvos-visionos-watchos-permissions-issue-in"},{"cve":"CVE-2026-86891","cvss":3.5,"epss":0.0023,"slug":"cve-2026-86891-apple-macos-core-bluetooth-authorization-bypass-allowing","title":"Apple macOS Core Bluetooth authorization bypass allowing Bluetooth device information access","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:40.067+00:00","url":"https://junglewise.ai/threats/cve-2026-86891-apple-macos-core-bluetooth-authorization-bypass-allowing"},{"cve":"CVE-2026-86888","cvss":3.3,"epss":0.0014,"slug":"cve-2026-86888-apple-app-store-permissions-issue-allowing-persistent-account","title":"Apple App Store permissions issue allowing persistent account identifier exposure","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:39.757+00:00","url":"https://junglewise.ai/threats/cve-2026-86888-apple-app-store-permissions-issue-allowing-persistent-account"},{"cve":"CVE-2026-86886","cvss":5.5,"epss":0.0017,"slug":"cve-2026-86886-apple-ios-path-traversal-in-system-file-access","title":"Apple iOS path traversal in system file access","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.553+00:00","url":"https://junglewise.ai/threats/cve-2026-86886-apple-ios-path-traversal-in-system-file-access"},{"cve":"CVE-2026-86884","cvss":5.5,"epss":0.0014,"slug":"cve-2026-86884-apple-ios-and-ipados-app-store-permissions-issue","title":"Apple iOS and iPadOS App Store permissions issue","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.34+00:00","url":"https://junglewise.ai/threats/cve-2026-86884-apple-ios-and-ipados-app-store-permissions-issue"},{"cve":"CVE-2026-86882","cvss":6.5,"epss":0.0048,"slug":"cve-2026-86882-apple-accelerate-framework-out-of-bounds-write-in-image","title":"Apple Accelerate Framework out-of-bounds write in image processing","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.123+00:00","url":"https://junglewise.ai/threats/cve-2026-86882-apple-accelerate-framework-out-of-bounds-write-in-image"},{"cve":"CVE-2026-86881","cvss":9.1,"epss":0.004,"slug":"cve-2026-86881-apple-ios-ipados-and-macos-certificate-validation-bypass","title":"Apple iOS, iPadOS, and macOS certificate validation bypass","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:39.01+00:00","url":"https://junglewise.ai/threats/cve-2026-86881-apple-ios-ipados-and-macos-certificate-validation-bypass"},{"cve":"CVE-2026-86876","cvss":5.2,"epss":0.0015,"slug":"cve-2026-86876-apple-accelerate-framework-out-of-bounds-write-in-image","title":"Apple Accelerate Framework out-of-bounds write in image processing","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.687+00:00","url":"https://junglewise.ai/threats/cve-2026-86876-apple-accelerate-framework-out-of-bounds-write-in-image"},{"cve":"CVE-2026-86870","cvss":6.5,"epss":0.0045,"slug":"cve-2026-86870-apple-ios-ipados-macos-visionos-watchos-heap-buffer-overflow-in","title":"Apple iOS, iPadOS, macOS, visionOS, watchOS heap buffer overflow in Accelerate Framework","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.58+00:00","url":"https://junglewise.ai/threats/cve-2026-86870-apple-ios-ipados-macos-visionos-watchos-heap-buffer-overflow-in"},{"cve":"CVE-2026-84636","cvss":5.5,"epss":0.0014,"slug":"cve-2026-84636-apple-ios-authorization-bypass-in-state-management","title":"Apple iOS authorization bypass in state management","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.377+00:00","url":"https://junglewise.ai/threats/cve-2026-84636-apple-ios-authorization-bypass-in-state-management"},{"cve":"CVE-2026-84635","cvss":6.5,"epss":0.0037,"slug":"cve-2026-84635-apple-safari-logic-issue-in-state-management","title":"Apple Safari logic issue in state management","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.26+00:00","url":"https://junglewise.ai/threats/cve-2026-84635-apple-safari-logic-issue-in-state-management"},{"cve":"CVE-2026-84632","cvss":7.3,"epss":0.0017,"slug":"cve-2026-84632-apple-ios-and-macos-3d-model-memory-corruption","title":"Apple iOS and macOS 3D model memory corruption","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:38.153+00:00","url":"https://junglewise.ai/threats/cve-2026-84632-apple-ios-and-macos-3d-model-memory-corruption"},{"cve":"CVE-2026-84630","cvss":4.7,"epss":0.0011,"slug":"cve-2026-84630-apple-ios-ipados-and-macos-race-condition-in-state-handling","title":"Apple iOS, iPadOS, and macOS race condition in state handling","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:37.94+00:00","url":"https://junglewise.ai/threats/cve-2026-84630-apple-ios-ipados-and-macos-race-condition-in-state-handling"},{"cve":"CVE-2026-84629","cvss":7.5,"epss":0.0042,"slug":"cve-2026-84629-apple-ios-and-ipados-user-fingerprinting-vulnerability","title":"Apple iOS and iPadOS user fingerprinting vulnerability","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:37.84+00:00","url":"https://junglewise.ai/threats/cve-2026-84629-apple-ios-and-ipados-user-fingerprinting-vulnerability"},{"cve":"CVE-2026-84628","cvss":5.5,"epss":0.0016,"slug":"cve-2026-84628-apple-ios-keychain-access-bypass-in-accounts","title":"Apple iOS Keychain access bypass in Accounts","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:37.73+00:00","url":"https://junglewise.ai/threats/cve-2026-84628-apple-ios-keychain-access-bypass-in-accounts"},{"cve":"CVE-2026-84626","cvss":3.3,"epss":0.0015,"slug":"cve-2026-84626-apple-ios-and-ipados-information-disclosure-via-app-enumeration","title":"Apple iOS and iPadOS information disclosure via app enumeration","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:37.63+00:00","url":"https://junglewise.ai/threats/cve-2026-84626-apple-ios-and-ipados-information-disclosure-via-app-enumeration"},{"cve":"CVE-2026-84625","cvss":9.1,"epss":0.0047,"slug":"cve-2026-84625-apple-ios-permissions-issue-allowing-user-fingerprinting","title":"Apple iOS permissions issue allowing user fingerprinting","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:37.523+00:00","url":"https://junglewise.ai/threats/cve-2026-84625-apple-ios-permissions-issue-allowing-user-fingerprinting"},{"cve":"CVE-2026-84622","cvss":6.2,"epss":0.0018,"slug":"cve-2026-84622-apple-ios-and-ipados-kernel-memory-disclosure-via-uninitialized","title":"Apple iOS and iPadOS kernel memory disclosure via uninitialized memory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:37.177+00:00","url":"https://junglewise.ai/threats/cve-2026-84622-apple-ios-and-ipados-kernel-memory-disclosure-via-uninitialized"},{"cve":"CVE-2026-84620","cvss":7.3,"epss":0.0017,"slug":"cve-2026-84620-apple-ios-and-macos-integer-overflow-in-3d-model-processing","title":"Apple iOS and macOS integer overflow in 3D model processing","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:36.97+00:00","url":"https://junglewise.ai/threats/cve-2026-84620-apple-ios-and-macos-integer-overflow-in-3d-model-processing"},{"cve":"CVE-2026-84616","cvss":5.5,"epss":0.0015,"slug":"cve-2026-84616-apple-ios-type-confusion-in-memory-handling","title":"Apple iOS type confusion in memory handling","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:36.553+00:00","url":"https://junglewise.ai/threats/cve-2026-84616-apple-ios-type-confusion-in-memory-handling"},{"cve":"CVE-2026-84612","cvss":5.5,"epss":0.0016,"slug":"cve-2026-84612-apple-ios-and-ipados-authorization-bypass-in-device-identifier","title":"Apple iOS and iPadOS authorization bypass in device identifier access","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:36.347+00:00","url":"https://junglewise.ai/threats/cve-2026-84612-apple-ios-and-ipados-authorization-bypass-in-device-identifier"},{"cve":"CVE-2026-84611","cvss":7.3,"epss":0.0017,"slug":"cve-2026-84611-apple-accelerate-framework-out-of-bounds-write-in-3d-model","title":"Apple Accelerate Framework out-of-bounds write in 3D model processing","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:36.24+00:00","url":"https://junglewise.ai/threats/cve-2026-84611-apple-accelerate-framework-out-of-bounds-write-in-3d-model"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":62},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":14},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":5,"exploited":0,"vulnerabilities":82},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Apple macOS","slug":"macos-tahoe","vulnerabilities":906,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":501,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":291,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":260,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":165,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":141,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"},{"name":"Apple SwiftNIO","slug":"swiftnio","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/swiftnio"},{"name":"Apple Container","slug":"container","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/container"}],"technology":{"hub":true,"name":"Apple watchOS","slug":"watchos","vendor":{"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":[],"category":"operating-system","homepage":"https://www.apple.com/watchos/","description":"An operating system developed by Apple for the Apple Watch.","url":"https://junglewise.ai/threats/technologies/watchos"},"most_severe":[{"cve":"CVE-2025-43300","cvss":10,"epss":0.0446,"slug":"cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o","title":"Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O","severity":"critical","exploited":true,"published_at":"2025-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o"},{"cve":"CVE-2025-24201","cvss":10,"slug":"cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability"},{"cve":"CVE-2025-24085","cvss":10,"slug":"cve-2025-24085-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2025-31200","cvss":9.8,"slug":"cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2025-31277","cvss":8.8,"epss":0.0148,"slug":"cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content","title":"Apple Multiple Products memory corruption in web content processing","severity":"critical","exploited":true,"published_at":"2025-07-30T00:15:30.83+00:00","url":"https://junglewise.ai/threats/cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content"},{"cve":"CVE-2021-30952","cvss":8.8,"epss":0.0089,"slug":"cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content","title":"Apple Multiple Products integer overflow in WebKit content processing","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content"},{"cve":"CVE-2025-43529","cvss":8.8,"epss":0.0017,"slug":"cve-2025-43529-apple-webkit-use-after-free-in-multiple-products","title":"Apple WebKit use-after-free in multiple products","severity":"critical","exploited":true,"published_at":"2025-12-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43529-apple-webkit-use-after-free-in-multiple-products"},{"cve":"CVE-2022-48503","cvss":8.8,"epss":0.0016,"slug":"cve-2022-48503-apple-multiple-products-code-execution-in-javascriptcore","title":"Apple Multiple Products code execution in JavaScriptCore","severity":"critical","exploited":true,"published_at":"2025-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-48503-apple-multiple-products-code-execution-in-javascriptcore"},{"cve":"CVE-2023-37450","cvss":8.8,"slug":"cve-2023-37450-apple-multiple-products-webkit-code-execution-vulnerability","title":"Apple Multiple Products WebKit Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-37450-apple-multiple-products-webkit-code-execution-vulnerability"},{"cve":"CVE-2023-32373","cvss":8.8,"slug":"cve-2023-32373-apple-multiple-products-webkit-use-after-free-vulnerability","title":"Apple Multiple Products WebKit Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-05-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-32373-apple-multiple-products-webkit-use-after-free-vulnerability"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}